$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/77CB8C6CBD9911ED86363B7AC4F9AE02.roa File: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (raw, json) Hash identifier: SgUApaKrz3I+VB8AtKHyQ8VOd7m+ovVx9xgf8pErYlU= Subject key identifier: E9:FA:DD:56:15:83:F9:4B:FC:D2:FB:34:AD:9A:DD:5F:6F:2E:B9:D0 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 06F8 Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/77CB8C6CBD9911ED86363B7AC4F9AE02.roa Signing time: Tue 18 Jun 2024 23:52:11 +0000 ROA not before: Tue 18 Jun 2024 23:52:11 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 200017 IP address blocks: 45.114.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1784 (0x6f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Jun 18 23:52:11 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66721dab-a265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a4:92:9f:27:ab:4a:4e:58:25:7c:48:5b:f5: fd:62:8e:f2:5c:17:c6:04:4b:17:c3:85:34:e9:f1: 45:58:11:c6:7c:84:06:21:7e:ef:0a:c0:8f:f8:2d: b4:0e:5d:f1:6e:6b:26:af:cb:89:61:19:3f:6a:36: 11:5b:d8:16:04:7a:5a:e7:2b:d5:df:16:ab:c4:8d: c7:8a:dc:d7:c5:65:02:1f:e7:08:10:b7:cb:1a:1e: 72:3e:d3:b9:1d:ff:dc:80:50:0a:b6:89:cc:7d:24: 43:e2:95:e9:9e:c2:50:04:ad:be:31:ea:44:04:1f: 9c:7a:44:eb:2f:9d:5e:a6:ed:eb:b5:46:aa:df:d2: d1:6e:d0:b4:5d:8f:12:12:72:bd:72:1a:ba:ed:ff: 13:fa:f8:b9:48:f1:83:fc:ef:80:26:1c:27:96:ca: 41:a4:e1:04:48:d2:93:da:a6:d1:0e:03:83:b3:58: f8:5e:e1:de:ea:44:e7:c9:fd:60:ea:cd:ed:29:8e: 37:06:f7:7f:62:04:9d:e2:88:8c:45:c4:8c:bb:41: 05:dd:8e:b3:e2:54:f1:8b:19:08:25:3d:3f:02:a8: 10:75:a6:b4:7d:f5:0d:a0:aa:55:ee:24:a4:23:a7: 93:95:98:aa:c1:0d:f4:3d:1c:7a:4f:50:19:df:fb: fb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FA:DD:56:15:83:F9:4B:FC:D2:FB:34:AD:9A:DD:5F:6F:2E:B9:D0 X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/77CB8C6CBD9911ED86363B7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.191.0/24 Signature Algorithm: sha256WithRSAEncryption 35:40:44:a3:b8:0f:fc:48:f1:d1:8a:d6:98:5a:c8:7c:4f:1a: 1f:d2:34:17:bc:a8:99:91:37:88:d6:c7:33:3b:72:1f:32:44: 7c:32:2c:86:c8:a6:9a:68:26:70:a2:75:e1:6c:db:15:c9:4c: a6:a4:41:92:6b:66:bd:2f:f2:15:01:cb:d7:11:78:69:24:2a: 33:3b:1b:a9:13:67:17:38:08:4e:ff:67:11:e8:06:e0:64:39: ae:68:a1:ee:85:1d:0e:f3:11:fc:2c:fd:6d:01:bd:0e:b8:84: cd:4b:19:a1:50:6c:8b:cf:4f:2e:22:1d:f9:ce:10:da:3d:4d: ea:b5:0a:0b:19:36:43:a1:03:4a:4e:f7:4e:7e:16:99:57:8e: fe:27:55:4b:fe:5f:a9:2b:12:c6:16:95:a8:b7:dd:a1:f1:2d: 49:5c:79:ac:2e:5a:6b:f7:cf:fe:5b:1f:c4:d5:a9:e1:00:31: 29:75:f5:11:70:85:5a:54:ae:ec:d0:7f:af:d1:78:a3:0e:77: 55:45:dd:10:19:44:b3:20:c9:12:20:10:17:c3:24:31:60:a3: d9:02:aa:8a:06:13:5a:37:35:39:f0:a2:50:e3:04:9a:87:0d: 42:13:29:72:9e:ce:19:93:8b:18:ea:42:31:5b:94:5d:c6:dd: 0b:cc:a4:d7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjQwNjE4MjM1MjExWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjcyMWRhYi1hMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlKSSnyerSk5YJXxIW/X9Yo7yXBfGBEsXw4U06fFFWBHGfIQGIX7vCsCP+C20 Dl3xbmsmr8uJYRk/ajYRW9gWBHpa5yvV3xarxI3HitzXxWUCH+cIELfLGh5yPtO5 Hf/cgFAKtonMfSRD4pXpnsJQBK2+MepEBB+cekTrL51epu3rtUaq39LRbtC0XY8S EnK9chq67f8T+vi5SPGD/O+AJhwnlspBpOEESNKT2qbRDgODs1j4XuHe6kTnyf1g 6s3tKY43Bvd/YgSd4oiMRcSMu0EF3Y6z4lTxixkIJT0/AqgQdaa0ffUNoKpV7iSk I6eTlZiqwQ30PRx6T1AZ3/v7wwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOn63VYV g/lL/NL7NK2a3V9vLrnQMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvNzdDQjhDNkNC RDk5MTFFRDg2MzYzQjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtcr8wDQYJKoZIhvcNAQELBQADggEBADVARKO4D/xI8dGK 1phayHxPGh/SNBe8qJmRN4jWxzM7ch8yRHwyLIbIpppoJnCideFs2xXJTKakQZJr Zr0v8hUBy9cReGkkKjM7G6kTZxc4CE7/ZxHoBuBkOa5ooe6FHQ7zEfws/W0BvQ64 hM1LGaFQbIvPTy4iHfnOENo9Teq1CgsZNkOhA0pO905+FplXjv4nVUv+X6krEsYW lai33aHxLUlceawuWmv3z/5bH8TVqeEAMSl19RFwhVpUruzQf6/ReKMOd1VF3RAZ RLMgyRIgEBfDJDFgo9kCqooGE1o3NTnwolDjBJqHDUITKXKezhmTixjqQjFblF3G 3QvMpNc= -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:45 2024 by rpki-client on console-fra.rpki-client.org